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Overview 


This document describes how system administrators can manage usage of BlackBerry® Messenger, as well as 

enable auditing for BlackBerry Messenger users on the BlackBerry Enterprise Server™ using IT policy rules. Usage 
of BlackBerry Messenger is managed using default IT policy rules on the BlackBerry Enterprise Server. Auditing of 
BlackBerry Messenger is implemented by importing custom IT policy files. 


Enabling and turning off BlackBerry Messenger using default IT policy rules 


You can manage the usage of BlackBerry Messenger by using the default IT policy rules on the BlackBerry 
Enterprise Server. 

















Policy rule Policy Description | Default | Minimum requirements Usage 
ae noe BlackBerry | BlackBerry | BlackBerry 
device device Enterprise 
type software Server 
software 
Allow Peer- Device- | This rule TRUE Java™ or 3.6 (Java) | 4.0 If this rule is 
to-Peer Only specifies 85x/95x or 2.5 set to FALSE, 
Messages whether (85x/95x) PIN 
users can messaging 
send PIN functionality 
messages on is hidden 
the from users. 
BlackBerry Warning: This 
device. rule does not 
prevent users 
from 
receiving PIN 
messages. 
Note: This 
rule does not 
prevent users 
from using 
BlackBerry 
Messenger. 
Disable Security | This rule TRUE Java 3.6 40 If this rule is 
Peer-to-Peer turns off the set to TRUE, 
Normal ability to messages must 
Send send plain be signed and, 
text PIN or encrypted. 
messages 
when using a 
signed and, 
or encrypted 
messaging 
package. 
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Audit Reports 2 
Policy rule Policy Description | Default | Minimum requirements Usage 
aie og BlackBerry | BlackBerry | BlackBerry 
device device Enterprise 
type software Server 
software 
Disable BlackBer This rule FALSE Java 3.6 4.0.2 If this rule is 
BlackBerry ry disables set to true, 
Messenger Messeng BlackBerry users are not 
er Policy Messenger able to use 
Group BlackBerry 
Messenger. 
Disallow Security Specifies FALSE Java 3.6 3.6 To prevent 
Third Party whether users from 
Application applications downloading 
Downloads not authored BlackBerry 
by Research Messenger 
In Motion are Using aly 
Internet 








permitted on 
the 
BlackBerry 
device. 

















browser on a 
computer, set 
this rule to 
TRUE. 


Note: Enabling 
this IT policy 
will disallow 
downloads of 
other third 
party 
applications 
over the 
wireless 
network, and 
through a 
computer 
Internet 
Browser. 





Audit Reports 


When auditing is enabled, all BlackBerry Messenger messages sent to or received from the BlackBerry® device 
are stored in a database on the BlackBerry device. A report of the database is periodically sent to the Messenger 
Audit Address. The report includes the following information in a message: 


e messages 


e display name updates 


e content (files and images) 


e associated timestamps 


System administrators can monitor the destination message account to verify that the audit reports have been 


received. 
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Audit report scenarios 





Scenario 


Description 





Backup and restore 


If the BlackBerry device data is backed up and 
restored, messages that have not yet been included 
in a report are backed up and restored, and then 
they are sent in the next report. 








Auto resend 


If the BlackBerry device is outside of a wireless 
coverage area at the time when a report is supposed 
to be sent, the program sends the report when the 
BlackBerry device enters a wireless coverage area. 








Audit mailbox size 


All audit reports are sent to the BlackBerry Messenger Audit Message Address as set using IT policy. The mailbox 
should be configured for size according to the following guidelines. 

















Scenario Audit report size for each user 
Minimum 0.5 KB 

Maximum 32 KB 

Average 5 KB 








With the Audit Report Interval set at 24 hours, the amount of data sent to the mailbox is the number of users 


multiplied by the audit report size. 
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Auditing IT policy rules 


You can use IT policy rules that are imported to the BlackBerry Enterprise Server to turn on auditing of BlackBerry 
Messenger usage. 


Note: These IT policy rules are included in BlackBerry Enterprise Server version 4.0.2 or later. 























Policy rule | Description Default Minimum requirements Usage 
aeung BlackBerry BlackBerry 
device type device 
software 

Messenger This rule specifies the |» NULL Java 3.6 If this rule is empty, 
Audit address to send auditing is turned off 
Address BlackBerry Messenger and no reports are sent. 

audit reports to. 
Messenger This rule specifies the |» NULL Java 3.6 If no UID is provided, 
Audit UID messaging service the first encrypted 

that is used to send message service is used. 

BlackBerry Messenger 

audit reports. 
Messenger — This rule specifies the | 24 Java 3.6 Reports can be sent 
Audit interval (in hours) at more frequently if they 
Report which an audit report are required to manage 
Interval is generated if new device memory. 

data exists. 
Messenger This rule specifies the 168 Java 3.6 
Audit Max interval (in hours) at 
Report which an audit report 
Interval is generated even if - 





no new data exists. 
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Importing custom IT policy rules 
Custom IT policy rules in the BlackBerry Messenger Policy group can be added to 


e BlackBerry Enterprise Servers running BlackBerry Enterprise Server Software version 3.6 or later for 
Microsoft® Exchange 


Custom IT policy rules cannot be added to 
e BlackBerry Enterprise Servers for IBM® Lotus® Domino® or Novell® GroupWise® 
Administrators can add custom IT policy rules to the BlackBerry Enterprise Server by importing an IT policy 


template file that contains SQL commands. The policy templates are included in Appendix A of this document. 


Import IT policy templates to BlackBerry Enterprise Server Software 3.6 or later for 
Microsoft Exchange 


1. Copy the IT policy template file from Appendix A of this document. 


2. See the BlackBerry Enterprise Server Administration Guide for more information on importing the file to the 
BlackBerry Enterprise Server. 


BlackBerry. 
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Appendix A: IT policy templates 
IT policy template for BlackBerry Enterprise Server Software 4.0 
/* 
* BlackBerry Enterprise Server ITPolicy Template 








* Copyright (C) 2005 Research In Motion Limited 
as 

USE "_DATABASENAME_" 

set nocount on 

GO 


/* Delete all the rows in the table to be updated or removed. */ 





/* (Note: Maintain SQL command format when adding new items to this 
list.) */ 





DELETE FROM ITPolicyTemplate2 WHERE ITPolicyItemTag IN (149) 
GO 








INSERT INTO ITPolicyTemplate2 

(ITPolicyItemTag, ITPolicyItemSubTag, ITPolicyItemName, ITPolicyItemDescri 
ption, ITPolicyItemType, ITPolicyItemMinValue, ITPolicyItemMaxValue, ITPoli 
cyItemDestination, ITPolicyItemUIMask,ITPolicyItemData) VALUES ( 
'149','0', 'BlackBerry Messenger Policy Group', 'Blackberry Messenger 
Policy Group','-1','0','0','0','2','' ) 












































INSERT INTO ITPolicyTemplate2 

(ITPolicyItemTag, ITPolicyItemSubTag, ITPolicyItemName, ITPolicyItemDescri 
ption, ITPolicyItemType, ITPolicyItemMinValue, ITPolicyItemMaxValue, ITPoli 
cyIltemDestination, ITPolicyItemUIMask,ITPolicyItemData) VALUES ( 







































































'149','15','Disable BlackBerry Messenger', 'Disables BlackBerry 
Messenger.||In the absence of this rule, a default value of "FALSE" is 
used. | This rule applies only to Java-enabled handhelds with BlackBerry 
Handheld Software version 3.6.0 or later.','0','0','0','0','2','' ) 
INSERT INTO ITPolicyTemplate2 











(ITPolicyItemTag, ITPolicyItemSubTag, ITPolicyItemName, ITPolicyItemDescri 
ption, ITPolicyItemType, ITPolicyItemMinValue, ITPolicyItemMaxValue, ITPoli 
cyltemDestination, ITPolicyItemUIMask,ITPolicyItemData) VALUES ( 
'149','16','Messenger Audit Email Address','Specifies th mail address 
to which BlackBerry Messenger audit reports are sent. If empty, then 
auditing is disabled and no reports are sent.||This rule applies only 
to Java-enabled handhelds versioned 3.6.0 and 

higher." ,.°2".°0", "07,707, 283.0% 3 






























































INSERT INTO ITPolicyTemplate2 

(ITPolicyItemTag, ITPolicyItemSubTag, ITPolicyItemName, ITPolicyItemDescri 
ption, ITPolicyItemType, ITPolicyItemMinValue, ITPolicyItemMaxValue, ITPoli 
c 























yiItemDestination, ITPolicyItemUIMask,ITPolicyItemData) VALUES ( 
49','17','Messenger Audit UID', 'Specifies the UID of the service book 
to use when sending reports. If empty, then the first secure 
(encrypted) messaging service is used.||This rule applies only to Java- 
enabled handhelds with BlackBerry Handheld Software version 3.6.0 or 
tater .*, '2?,0%, 70%, 10%, 72%) 7%) 























Bee 
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INSERT INTO ITPolicyTemplate2 

(ITPolicyItemTag, ITPolicyItemSubTag, ITPolicyItemName, ITPolicyItemDescri 
ption, ITPolicyItemType, ITPolicyItemMinValue, ITPolicyItemMaxValue, ITPoli 
c 


























yiItemDestination, ITPolicyItemUIMask,ITPolicyItemData) VALUES ( 
49','18','Messenger Audit Report Interval','Specifies the interval, 
in hours, after which a new report is sent, if there is new 

data. |Reports may be sent more frequently if required to manage device 


memory.||The valid range for the value of this rule is 1 through 8736 





























hours.||In the absence of this rule, a default value of "24" is 
used. |This rule applies only to Java-enabled handhelds with BlackBerry 
Handheld Software version 3.6.0 or later.','1','1','8736','0','2','' ) 


INSERT INTO ITPolicyTemplate2 
(ITPolicyItemTag, ITPolicyItemSubTag, ITPolicyItemName, ITPolicyItemDescri 
ption, ITPolicyItemType, ITPolicyItemMinValue, ITPolicyItemMaxValue, ITPoli 
cyltemDestination, ITPolicyItemUIMask,ITPolicyItemData) VALUES ( 
'149','19','Messenger Audit Max Report Interval','Specifies the 
interval, in hours, after which a new report is sent, even if there is 
no new data.||The valid range for the value of this rule is 1 through 
8736 hours.||In the absence of this rule, a default value of "168" is 
used. ||This rule applies only to Java-enabled handhelds with BlackBerry 
Handheld Software version 3.6.0 or later.','1','1','8736','0','2','' ) 


















































Be, 
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IT policy template for BlackBerry Enterprise Server Software 3.6 
/* 





* BlackBerry Enterprise Server ITPolicy Template 
* Copyright (C) 2004 Research In Motion Limited 
* 

USE "_DATABASENAME_" 





set nocount on 
GO 
/* Delete all the rows in the table to be updated or removed. */ 





/* (Note: maintain SQL command format when adding new items to this 
list.) */ 


DELETE FROM ITPolicyTemplate2 WHERE ITPolicyItemTag IN (149) 





GO 











INSERT INTO ITPolicyTemplate2 VALUES( '149','0','BlackBerry Messenger 
Policy Group','Blackberry Messenger Policy Group', '- 
Me VIOre 4 MO MOM 4 VD ea ) 











INSERT INTO ITPolicyTemplate2 VALUES( '149','15','Disable BlackBerry 
Messenger','Disables BlackBerry Messenger.||In the absence of this 
rule, a default value of "FALSE" is used.||This rule applies only to 
Java-enabled handhelds with BlackBerry Handheld Software version 3.6.0 
or Later.) 70%) 1015 10 Ot 2 












































INSERT INTO ITPolicyTemplate2 VALUES( '149','16','Messenger Audit Email 
Address','Specifies th mail address to which BlackBerry Messenger 
audit reports are sent. If empty, then auditing is disabled and no 
reports are sent.||This rule applies only to Java-enabled handhelds 


with BlackBerry Handheld Software version 3.6.0 or 

tater 220 MONS BOM 5 MOM ee 2eY he} 

INSERT INTO ITPolicyTemplate2 VALUES( '149','17','Messenger Audit 

UID', 'Specifies the UID of the service book to use when sending 
reports. If empty, then the first secure (encrypted) email service is 
used. ||This rule applies only to Java-enabled handhelds with BlackBerry 
Handheld Software version 3.6.0 or later.','2','0','0','0','2','' ) 











INSERT INTO ITPolicyTemplate2 VALUES( '149','18','Messenger Audit 
Report I 








Interval','Specifies the interval, in hours, after which a new 
report is sent, if there is new data.||Reports may be sent more 
frequently if required to manage device memory.||The valid range for 
the value of this rule is 1 through 8736 hours.||In the absence of this 
rule, a default value of "24" is used.||This rule applies only to Java- 
enabled handhelds with BlackBerry Handheld Software version 3.6.0 or 
Later. pL" hls £18736", "ON, Ta 8 






































INSERT INTO ITPolicyTemplate2 VALUES( '149','19','Messenger Audit Max 
Report Interval','Specifies the interval, in hours, after which a new 
report is sent, even if there is no new data.||The valid range for the 
value of this rule is 1 through 8736 hours.||In the absence of this 
rule, a default value of "168" is used. |This rule applies only to 
Java-enabled handhelds with BlackBerry Handheld Software version 3.6.0 








or later. *) "I", “1, 8736! 470,27 ge") 


Bee 
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Part number: SWD_X_IM(EN)-006.003 


*Check with service provider for availability, roaming arrangements and service plans. Certain features outlined in this document require a 
minimum version of BlackBerry Enterprise Server software, BlackBerry Desktop Software, and/or BlackBerry handheld software. May require 
additional application development. Prior to subscribing to or implementing any third party products or services, it is your responsibility to 
ensure that the airtime service provider you are working with has agreed to support all of the features of the third party products and 
services. Installation and use of third party products and services with RIM's products and services may require one or more patent, 
trademark or copyright licenses in order to avoid infringement of the intellectual property rights of others. You are solely responsible for 
determining whether such third party licenses are required and are responsible for acquiring any such licenses. To the extent that such 
intellectual property licenses may be required, RIM expressly recommends that you do not install or use these products and services until all 
such applicable licenses have been acquired by you or on your behalf. Your use of third party software shall be governed by and subject to 
you agreeing to the terms of separate software licenses, if any, for those products or services. Any third party products or services that are 
provided with RIM's products and services are provided "as is". RIM makes no representation, warranty or guarantee whatsoever in relation 
to the third party products and services and RIM assumes no liability whatsoever in relation to the third party products and services even if 
RIM has been advised of the possibility of such damages or can anticipate such damages. 


© 2006 Research In Motion Limited. All rights reserved. The BlackBerry and RIM families of related marks, images and symbols are the 
exclusive properties of Research In Motion Limited. RIM, Research In Motion, BlackBerry and ' Always On, Always Connected' are registered 
with the U.S. Patent and Trademark Office and may be pending or registered in other countries. 


IBM, Lotus, and Domino are trademarks of International Business Machines Corporation in the United States, other countries, or both. 
Microsoft is a registered trademark of Microsoft Corporation in the United States and/or other countries. Novell is a registered trademark of 
Novell, Inc. in the United States and other countries. Java is a trademark or registered trademark of Sun Microsystems Inc. in the U.S. or other 
countries. 


All other brands, product names, company names, trademarks and service marks are the properties of their respective owners. 


The BlackBerry device and/or associated software are protected by copyright, international treaties and various patents, including one or 
more of the following U.S. patents: 6,278,442; 6,271,605; 6,219,694; 6,075,470; 6,073,318; D445,428; D433,460; D416,256. Other 
patents are registered or pending in various countries around the world. Visit www.rim.com/patents.shtml for a list of RIM [as hereinafter 
defined] patents. 


This document is provided “as is" and Research In Motion Limited and its affiliated companies ("RIM") assume no responsibility for any 
typographical, technical or other inaccuracies in this document. RIM reserves the right to periodically change information that is contained in 
this document; however, RIM makes no commitment to provide any such changes, updates, enhancements or other additions to this 
document to you in a timely manner or at all. RIM MAKES NO REPRESENTATIONS, WARRANTIES, CONDITIONS OR COVENANTS, EITHER 
EXPRESS OR IMPLIED (INCLUDING WITHOUT LIMITATION, ANY EXPRESS OR IMPLIED WARRANTIES OR CONDITIONS OF FITNESS FORA 
PARTICULAR PURPOSE, NON-INFRINGEMENT, MERCHANTABILITY, DURABILITY, TITLE, OR RELATED TO THE PERFORMANCE OR NON- 
PERFORMANCE OF ANY SOFTWARE REFERENCED HEREIN OR PERFORMANCE OF ANY SERVICES REFERENCED HEREIN). IN CONNECTION 
WITH YOUR USE OF THIS DOCUMENTATION, NEITHER RIM NOR ITS AFFILIATED COMPANIES AND THEIR RESPECTIVE DIRECTORS, 
OFFICERS, EMPLOYEES OR CONSULTANTS SHALL BE LIABLE TO YOU FOR ANY DAMAGES WHATSOEVER BE THEY DIRECT, ECONOMIC, 
COMMERCIAL, SPECIAL, CONSEQUENTIAL, INCIDENTAL, EXEMPLARY OR INDIRECT DAMAGES, EVEN IF RIM HAS BEEN ADVISED OF THE 
POSSIBILITY OF SUCH DAMAGES, INCLUDING WITHOUT LIMITATION, LOSS OF BUSINESS REVENUE OR EARNINGS, LOST DATA, DAMAGES 
CAUSED BY DELAYS, LOST PROFITS, OR A FAILURE TO REALIZE EXPECTED SAVINGS. 








This document might contain references to third party sources of information, hardware or software, products or services and/or third party 
web sites (collectively the "Third-Party Information"). RIM does not control, and is not responsible for, any Third-Party Information, including, 
without limitation the content, accuracy, copyright compliance, compatibility, performance, trustworthiness, legality, decency, links, or any 
other aspect of Third-Party Information. The inclusion of Third-Party Information in this document does not imply endorsement by RIM of the 
Third Party Information or the third party in any way. Installation and use of Third Party Information with RIM's products and services may 
require one or more patent, trademark or copyright licenses in order to avoid infringement of the intellectual property rights of others. Any 
dealings with Third Party Information, including, without limitation, compliance with applicable licenses and terms and conditions, are solely 
between you and the third party. You are solely responsible for determining whether such third party licenses are required and are 
responsible for acquiring any such licenses relating to Third Party Information. To the extent that such intellectual property licenses may be 
required, RIM expressly recommends that you do not install or use Third Party Information until all such applicable licenses have been 
acquired by you or on your behalf. Your use of Third Party Information shall be governed by and subject to you agreeing to the terms of the 
Third Party Information licenses. Any Third Party Information that is provided with RIM's products and services is provided "as is". RIM 
makes no representation, warranty or guarantee whatsoever in relation to the Third Party Information and RIM assumes no liability 
whatsoever in relation to the Third Party Information even if RIM has been advised of the possibility of such damages or can anticipate such 
damages. 
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